THE FAILURE MARGIN
Read Chapter 15: THE MOON MACHINE
By late 1968, Apollo had become a different program.
The fire had broken its certainty and sharpened its discipline. Hardware changes were debated fiercely, but test failures were harder to bury. Raw data traveled with summary reports. Independent reliability engineers appeared at meetings where schedule had once ruled alone.
Luc’s DCP redesign passed vibration, thermal vacuum and combined environmental testing without a single unexplained power dropout.
He kept the failed relay from unit 14 in his desk drawer.
Reed called it the holy relic.
“Every religion needs a bone,” he said.
“It is a relay.”
“In yours, same thing.”
Apollo 8 circled the Moon that December.
Luc and Élodie watched the broadcast with neighbors crowded into their living room. When the astronauts read from Genesis while the lunar surface rolled beneath them, no one spoke.
Élodie squeezed Luc’s hand.
“You helped build that?”
“Not that spacecraft.”
“That was not my question.”
Luc looked at the screen.
“Yes,” he said quietly. “A little.”
For the first time since Delaney’s death, pride did not feel like betrayal.
But the investigation had not ended.
Nathan Vale resigned from Asterion in January 1969. The company announced health reasons. Two months later, a federal grand jury issued indictments related to false certification of contract test data and obstruction of an internal audit.
Vale pleaded not guilty.
The newspapers finally printed details.
A French engineer’s name appeared in one article, misspelled.
Luc received three kinds of mail: praise, threats and job offers.
One letter called him a Soviet sympathizer who had tried to sabotage the Moon landing by creating delays. Another thanked him for “standing up for the astronauts.”
He disliked both versions of himself.
At Asterion, some colleagues stopped speaking to him. Others quietly shook his hand.
Susan Bell left the company and joined a federal laboratory.
Pike was demoted, then reassigned to ground-support engineering. He accepted the decision without appeal.
One afternoon he visited Luc’s office.
“You going to stay?” Pike asked.
“Through the landing.”
“And after?”
“I do not know.”
Pike nodded toward the relay in Luc’s drawer. “You still keep that thing?”
“Yes.”
“Why?”
“To remember.”
Pike gave a tired smile. “You think you’ll forget?”
“Everyone does.”
Outside, technicians were loading equipment for another integrated test.
The Moon was no longer an abstraction. It had become a destination with checklists.
And Luc had learned that the most dangerous part of a machine was sometimes not what failed.
It was what people decided not to record.
The months before Apollo 8 were the most disciplined Luc had seen at Asterion.
The redesigned DCP unit underwent a combined test campaign deliberately harsher than the original. Luc insisted on simultaneous temperature, vibration and switching sequences that reproduced the suspected contact-opening conditions.
Pike surprised everyone by supporting him.
“If it is going to fail,” Pike told the lab crew, “make it fail here.”
The first prototype did.
Not at the relay—the new hermetic component held—but at a solder joint near the heavier part. The increased relay mass changed board stress under vibration.
Reed looked at Luc after the failure trace appeared.
“Forty-seven grams has returned for revenge.”
Luc almost laughed.
The board was reinforced, the solder process revised, and the unit retested. It passed.
That sequence became important to Luc because it demonstrated what honest failure actually did. The failed redesign test did not destroy the program. It improved the design. Nobody went to prison. Nobody died. Schedule slipped by eleven days.
Eleven days.
For years, managers had behaved as though acknowledging the original relay problem would cost the Moon.
The actual cost of fixing its replacement properly was eleven days.
Luc wrote the number in his notebook and boxed it.
Some fears became powerful because no one forced them to become estimates.
Before the final redesign campaign, NASA required Asterion to hold a failure-review board with independent participants. Luc expected another procedural battle. Instead, the board changed the tone of the work.
The chairman, a propulsion reliability engineer with no stake in DCP schedule, began by asking everyone to state what outcome would cause them to reject the new design. That simple question prevented the criteria from moving after data appeared.
For the relay network, Luc proposed three rejection conditions: any open contact under combined environment, any regulator output below logic hold-up threshold, or any unexplained reset in the computer emulator. Pike added a fourth involving solder-joint strain after the heavier relay was mounted.
“Look at you,” Reed whispered. “Learning pessimism.”
Pike heard him. “I learned it was cheaper than lawyers.”
The first redesigned unit then failed on the solder joint exactly as Pike's criterion anticipated.
Nobody argued that the run was invalid. Nobody reduced vibration. Nobody asked whether the failure could be classified as non-representative. The board recorded it, assigned cause analysis and scheduled another test.
Luc watched the process with almost painful interest.
Nothing dramatic happened.
That was the point.
A healthy engineering system made bad news boring.
The laboratory team cross-sectioned the joint, identified local board flexure and added a small mechanical support. The change cost less than the meetings that had once defended the original relay.
During the successful retest, Luc stood beside Evelyn Carter in the control room. The voltage trace remained flat through the worst vibration band.
“Disappointed?” she asked.
“Why?”
“You've spent years staring at failures. Success gives you nothing to complain about.”
Luc smiled.
“Success that preserves the failed runs is acceptable.”
Carter shook her head. “Monsieur Millisecond until death.”
The nickname spread to the independent board. Luc pretended to dislike it.
Privately, he found it reassuring. Four milliseconds had once been small enough for managers to dismiss. Now the whole review system had been changed because people finally agreed that duration did not determine importance.
A fact could be brief and still alter history.
Continue Reading Free
Unlock This Chapter
Watch a short ad to unlock this chapter.
No payment required.